Privacy notice

Tender Bids drafts answers to public-sector tender questions from a company's own documents. Two kinds of personal data pass through it: the name, role and work e-mail of the people who use an account, and whatever personal data the uploaded documents contain — a CV names a person and their career. For the first we are the controller. For the second the company is the controller and we process its documents on its instructions, only to draft its bid.

Who is responsible

Data controller for this service: Armen Sarkisian, Komitas 57, 0032 Yerevan, Armenia. Questions about your data: privacy@vitersoft.com. You can also complain to the Information Commissioner's Office (ico.org.uk).

What is stored, and why

• The company's name and what it supplies, the tender it named and its deadline, as typed on the form — to answer the request.
• The name, role and work e-mail of each person on the account, and the order they placed — to run the account and the order.
• The documents you upload, in private storage, and the text read from them in your browser — to draft the bid.
• What our code found in the tender documents, the drafted answers, the editor's decisions, and the published draft.
• Counts of how the tool is used: numbers and categories, never a name or a word from your documents.

We do not store IP addresses. No automated decision about you is made: every answer is checked by a person, and you decide what to submit.

How long

Uploaded documents, the text read from them, what was found in them and the answers drafted from them are deleted automatically 30 days after upload. The order and the published draft stay until the account is deleted. The owner can delete the account from the settings page at any time: that removes everything at once, and we count each of our tables and the storage afterwards to confirm nothing is left. An account nobody ever signed in to is removed automatically after 30 days. Sign-in links are stored only as a hash and removed within a day of expiring.

Who else sees it

• Cloudflare, Inc. (USA and EU) — runs the application.
• Supabase (EU, Frankfurt) — the database and the private file storage. Only our server can read them; the public keys hold no rights at all.
• Sendinblue SAS, 9-17 rue Salneuve, 75017 Paris, France (trading as Brevo) — sends sign-in links and the message that a draft is ready. No message carries anything from your documents. Brevo puts an invisible image in every letter it sends, so it registers when a letter is opened; we cannot switch it off per message. The sign-in link itself is not rewritten.
• OpenRouter, Inc. (USA) — only when our editor drafts an answer with the model: the tender question and up to 40 sentences of your documents that our code chose for it, nothing else — no e-mail, no account details. Requests go only to model providers that keep nothing they are sent (zero data retention), so nothing is stored or used to train a model. We have no separate data processing agreement with OpenRouter; if you do not want your documents to go to it, tell us and the editor writes every answer by hand.
• PostHog (EU, Germany) — the usage counts above, without cookies or profiles.
• Our editor — a person working for us who reads your documents to draft and check the answers.

Where a recipient processes data outside the UK or EEA, the transfer is covered by Standard Contractual Clauses.

The tender radar on the home page shows Find a Tender notices — public data about public bodies, reused under the Open Government Licence. It holds nothing about you.

Cookies

One: the sign-in cookie, which holds the account and the person and nothing else. The analytics run without cookies and without local storage, so there is no banner to click.

Your rights

Under UK GDPR you can ask for a copy of what we hold about you, have it corrected, or have it deleted — the last you can do yourself in settings. A person whose details are in an uploaded document should ask the company first; we act on its instructions. Write to privacy@vitersoft.com or tenders@vitersoft.com and a person answers.